Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33B93F0A210B11F19ADE437BDAE4EC9C.roa
File: 33B93F0A210B11F19ADE437BDAE4EC9C.roa (raw, json)
Hash identifier: IIcmMrnpFykvp9ks3Ryz5ymdU8ZrBN+R5f7SZEZTgoo=
Subject key identifier: E4:98:1C:11:BC:17:53:7E:86:71:91:D3:27:C6:2F:74:B5:9C:E7:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A56E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33B93F0A210B11F19ADE437BDAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:39:03 +0000
ROA not before: Mon 16 Mar 2026 07:38:58 +0000
ROA not after: Thu 23 Apr 2026 07:38:58 +0000
asID: 149940
IP address blocks: 45.198.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107886 (0x1a56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:38:58 2026 GMT
Not After : Apr 23 07:38:58 2026 GMT
Subject: CN=69b7b396-920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:80:c7:48:10:e1:7f:1d:84:12:6b:ea:fd:
69:fa:a5:38:75:3d:43:b9:a9:59:86:b7:8c:9a:e2:
80:ef:de:2f:95:fa:f0:8b:98:33:d8:5c:56:e7:c2:
31:dd:0d:1f:91:5d:86:db:9b:df:76:3a:4a:de:e6:
b0:a8:6d:74:a3:1d:5f:98:c0:67:15:bc:26:02:25:
a5:a9:8f:e0:f7:37:7e:eb:01:f1:cb:8e:83:de:ba:
8b:e3:3a:f7:30:b5:46:8c:28:56:3e:e5:7c:77:ca:
c5:27:2f:66:40:af:24:0b:0d:7c:64:34:cc:f0:61:
d1:bf:21:15:9b:15:9f:f9:ba:5a:42:cf:2f:25:59:
c4:04:28:a6:30:a7:e2:ea:98:55:a9:b8:5a:e7:6f:
43:ce:b0:d5:63:17:8a:8a:70:e3:e4:e6:7d:e1:06:
e4:15:09:2f:aa:ce:2f:d9:f9:09:c6:dd:e6:1c:9f:
e5:f0:61:48:52:9f:45:47:7c:92:55:7c:fa:d5:72:
ec:f9:2b:db:af:07:ef:40:95:c9:e7:5e:30:6a:16:
11:1c:3d:17:3c:eb:55:b2:19:99:3c:30:6a:19:20:
54:bf:2c:0d:54:ef:db:91:08:d0:aa:a7:69:ff:ac:
91:64:42:09:3a:54:41:6d:e3:a2:3f:e7:f0:09:61:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:98:1C:11:BC:17:53:7E:86:71:91:D3:27:C6:2F:74:B5:9C:E7:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33B93F0A210B11F19ADE437BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e3:90:d3:1a:45:8b:72:4a:8e:61:c3:c5:12:a1:44:fb:2c:
07:df:ea:c7:b2:d3:12:27:5d:cb:a2:ed:e8:44:0a:b6:a4:71:
d1:46:14:f9:df:93:a6:96:f7:ac:7c:f8:ec:61:29:1c:bd:5e:
58:e9:0d:6c:ee:38:97:b4:5b:7b:3a:6b:e9:90:e9:9b:fe:13:
b9:3b:e9:1e:8e:fb:82:9b:c7:42:cb:1d:95:62:69:dd:42:6d:
3b:42:4b:dd:c4:73:1f:9e:73:07:9d:fb:ff:99:cf:a1:75:72:
e6:7e:c4:62:8b:8f:3d:ae:0d:a6:bc:8d:bd:81:88:9c:58:dd:
21:60:63:10:bb:e1:2d:65:1b:8c:4a:ff:15:46:14:7f:a9:ac:
29:15:8a:d0:3f:37:2d:00:09:bf:aa:22:81:44:fc:0d:06:15:
90:ef:39:e0:b4:0d:9f:93:7c:19:70:34:24:70:53:2f:72:27:
54:75:49:fd:05:d0:28:a7:51:f3:00:f8:0e:e2:c2:16:f9:4c:
3e:8e:42:3c:95:5f:b2:76:4e:97:ac:4d:5b:30:7a:63:c0:b1:
a3:32:c8:83:ba:85:0b:04:e3:bd:41:c1:4c:b5:a5:8b:fc:41:
4e:7b:d8:7a:5b:90:13:14:47:5a:b7:16:36:8a:a5:5e:00:74:
e5:46:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:38 2026 by rpki-client